CVE-2012-4689 Integer overflow in n/a

What is CVE-2012-4689?

CVE-2012-4689 is a medium-severity vulnerability in n/a, published on 17 Jan 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Integer overflow in CimWebServer.exe in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and Proficy Process Systems with CIMPLICITY, allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.

Weakness: CWE-189

Which versions are affected by CVE-2012-4689?

It affects 3 products.

Products include Ge Intelligent Platforms Proficy Hmi\/Scada Cimplicity, Ge Intelligent Platforms Proficy Process Systems, Ge Intelligent Platforms Proficy Process Systems With Cimplicity.

How do I fix CVE-2012-4689?

No fix has been published for CVE-2012-4689 yet. Limit exposure of the affected software until one is available.

Is CVE-2012-4689 being exploited?

There is no known exploitation of CVE-2012-4689 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2013-2785 Memory corruption in n/a Critical 9.3
• CVE-2013-0654 Command injection in n/a Critical 9.3
• CVE-2017-12732 Memory corruption in GE CIMPLICITY Medium 6.8
• CVE-2014-2355 GE Proficy HMI/SCADA CIMPLICITY CimView Medium 6.6
• CVE-2013-0653 Path traversal in n/a Medium 4.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xv32-q7h7-g7hp.